Join EY and contribute to building a better working world by enhancing our cloud security posture. This role focuses on creating and maintaining secure virtual machine images within AWS and Azure environments, leveraging advanced CI/CD practices and automation.

You will be instrumental in deploying secure, hardened images and ensuring adherence to industry best practices. A commitment to continuous learning and adaptation to evolving security threats is paramount.

Develop and automate the creation and maintenance of secure, hardened VM images across AWS and Azure. Design and implement robust CI/CD pipelines for image deployment and management. Automate end-to-end workflows for image creation, validation, testing, and deployment. Implement comprehensive OS hardening for various Linux distributions and Windows Server versions. Build and manage automated patching solutions for both Linux and Windows images. Apply CIS L1/L2 frameworks to proactively identify and remediate vulnerabilities. Support audits by providing necessary documentation and remediation strategies. Integrate security validation into pipelines, including vulnerability scanning and compliance checks. Conduct peer reviews to ensure the quality and consistency of automation scripts and IaC templates. Collaborate with cross-functional teams to align hardened images with enterprise security requirements.

A minimum of 5 years of IT experience, with at least 3 years specializing in image hardening. Requires at least 2 years of application development experience in Python and at least 2 years of experience with Terraform. You should also have 3-5 years of experience managing and securing multi-cloud environments (AWS, Azure, GCP) using native security tools. Strong proficiency in scripting languages such as Python, PowerShell, and Bash is essential. Experience with Azure DevOps, Ansible, and Packer is highly desirable. A deep understanding of CIS Benchmarks (L1/L2), OS hardening techniques, and automated security remediation is crucial.